New: Doc page for chroot build recommendations

[mia-doran]

What topic are you requesting a resource about?

• Chainguard product: Chainguard Containers -> How to Use

Proposed title: Build with base-chroot Method

Description: Doc can be found here. This document may need to be reviewed by engineering/ProServ to validate instructions are UTD. I am happy to facilitate scheduling these reviews!

[zacharyyonash]

I'll run through the whole doc in a bit, but at a quick glance the only thing I see in there that we (PS) don't usually use is --no-commit-hooks, but it is required in rare cases. Example:

# Install the packages into a root derived from the distroless image.
#
# This method temporarily installs bash because some packages require a shell
# to run postinstall scripts and hooks. In this case (and most cases) you could 
# omit this.
COPY --from=cgr.dev/chainguard/python:latest / /base-chroot
RUN apk add --no-commit-hooks --no-cache --root /base-chroot bash-binsh \
  && apk add --no-cache --root /base-chroot mariadb-connector-c-dev mariadb \
  && apk del --no-commit-hooks --root /base-chroot bash-binsh